OpenVPN Bridge wont connect outside of LAN - Routed Works

job

Hi

Apologies for first post being a problem. Tearing my few remaining hairs out on this and cant work out the problem.

I have followed the instructions here: https://openvpn.net/index.php/open-source/documentation/howto.html in order to successfully set up a routed OpenVPN connection. This works remotely (e.g. via external web connection, Mobile, etc) and I have a Samba share working on it.

I have then attempted to set up a Bridged connection by following instructions here: https://openvpn.net/index.php/open-source/documentation/miscellaneous/76-ethernet-bridging.html

This proves successful and I can connect to OpenVPN over my LAN. However as soon as I switch to a mobile internet connection I get the below error message:

Tue Mar 22 12:38:22 2016 us=800801 TCP: connect to [AF_INET]x.x.x.x:1194 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Tue Mar 22 12:38:27 2016 us=811814 MANAGEMENT: >STATE:1458650307,RESOLVE,,,
Tue Mar 22 12:38:27 2016 us=811814 MANAGEMENT: >STATE:1458650307,TCP_CONNECT,,,
[repeat until end of world...]

A few comments:

1. I can run the 'server' (e.g. routed) configuration (rather than the 'bridged') and successfully connect to OpenVPN with access to Samba shares etc. both over my LAN and via the same mobile connection I am using to test remote connections (using the same port).
2. I can connect to the bridged OpenVPN configuration over my LAN.
3. I have configured my Router port forwarding and IPTables to allow port access for two ports (standard 1194 and a non standard port) which both work with the Routed connection

bridge.conf

local 172.16.32.70
port 1194
proto tcp
dev tap0

[encryption params]

ifconfig-pool-persist /var/mylog/ipp.txt
server-bridge 172.16.32.70 255.255.255.0 172.16.32.90 172.16.32.99
keepalive 10 120
comp-lzo
persist-key
persist-tun
status /var/mylog/openvpn-status.log
log-append /var/mylog/openvpn.log
verb 5

bridge-start

#!/bin/bash

#################################
# Set up Ethernet bridge on Linux
# Requires: bridge-utils
#################################

# Define Bridge Interface
br="br0"

# Define list of TAP interfaces to be bridged,
# for example tap="tap0 tap1 tap2".
tap="tap0"

# Define physical ethernet interface to be bridged
# with TAP interface(s) above.
eth="em1"
eth_ip="172.16.32.70"
eth_netmask="255.255.255.0"
eth_broadcast="172.16.32.255"

for t in $tap; do
    openvpn --mktun --dev $t
done

brctl addbr $br
brctl addif $br $eth

for t in $tap; do
    brctl addif $br $t
done

for t in $tap; do
    ifconfig $t 0.0.0.0 promisc up
done

ifconfig $eth 0.0.0.0 promisc up
ifconfig $br $eth_ip netmask $eth_netmask broadcast $eth_broadcast

ifconfig output

br0       Link encap:Ethernet  HWaddr 2C:76:8A:AB:D4:40
          inet addr:172.16.32.70  Bcast:172.16.32.255  Mask:255.255.255.0
          inet6 addr: fe80::2e76:8aff:feab:d440/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:22919 errors:0 dropped:0 overruns:0 frame:0
          TX packets:11915 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1851115 (1.7 MiB)  TX bytes:18494685 (17.6 MiB)

em1       Link encap:Ethernet  HWaddr 2C:76:8A:AB:D4:40
          inet6 addr: fe80::2e76:8aff:feab:d440/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:32252 errors:0 dropped:0 overruns:0 frame:0
          TX packets:30144 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:3809838 (3.6 MiB)  TX bytes:21892315 (20.8 MiB)
          Interrupt:18

lo        Link encap:Local Loopback
          inet addr:127.0.0.1  Mask:255.0.0.0
          inet6 addr: ::1/128 Scope:Host
          UP LOOPBACK RUNNING  MTU:16436  Metric:1
          RX packets:8375 errors:0 dropped:0 overruns:0 frame:0
          TX packets:8375 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:590362 (576.5 KiB)  TX bytes:590362 (576.5 KiB)

tap0      Link encap:Ethernet  HWaddr F2:AF:C7:7A:80:D7
          inet6 addr: fe80::f0af:c7ff:fe7a:80d7/64 Scope:Link
          UP BROADCAST RUNNING PROMISC MULTICAST  MTU:1500  Metric:1
          RX packets:1729 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9140 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100
          RX bytes:438386 (428.1 KiB)  TX bytes:921895 (900.2 KiB)

Someone please help as run out of ideas...?

Traffic

Did you change your client to use --dev-type tap ?

job

sorry, yes I should have mentioned this. Below is client config.

I should also mention I am connecting from a Windows 7 (client) to a Fedora Linux (server) machine.

clientbridge.ovpn

client
dev tap
proto tcp
remote [server url] 1194
resolv-retry infinite
nobind
persist-key
persist-tun

[Encryption settings]

comp-lzo
verb 6
route 0.0.0.0 0.0.0.0 vpn_gateway 999

Traffic

job wroteI should also mention I am connecting from a Windows 7 (client

I would implicitly specify --dev-type tap

job wroteremote [server url] 1194

I presume this resolves correctly ?

Your complete server & client logs at --verb 4 would help a lot (remove private data)

job

Traffic wrote
job wroteI should also mention I am connecting from a Windows 7 (client
I would implicitly specify --dev-type tap

job wroteremote [server url] 1194
I presume this resolves correctly ?

Your complete server & client logs at --verb 4 would help a lot (remove private data)

Apologies but I dont understand how I would specify --dev-type tap on windows? I am using the OpenVPN Windows GUI client to attempt to connect to a linux server.

I believe the URL resolves. The other uses I make of this URL resolve correctly and I can run the 'Routed' OpenVPN configuration successfully using the same URL and ports over the same remote connections. Additionally the LAN 'Bridged' connection that successfully connects actually still makes use of the URL (rather than using a local IP) in the client config.

The below logs are the result of the following:

1. running bridge-start on the server
2. running systemctl start openvpn@bridge.service on the server
3. opening OpenVPN GUI in Windows 7 and connecting using the bridge client config.

server log file

Tue Mar 22 15:28:52 2016 us=903114 Current Parameter Settings:
Tue Mar 22 15:28:52 2016 us=903377   config = 'bridge.conf'
Tue Mar 22 15:28:52 2016 us=903409   mode = 1
Tue Mar 22 15:28:52 2016 us=903438   persist_config = DISABLED
Tue Mar 22 15:28:52 2016 us=903462   persist_mode = 1
Tue Mar 22 15:28:52 2016 us=903484   show_ciphers = DISABLED
Tue Mar 22 15:28:52 2016 us=903506   show_digests = DISABLED
Tue Mar 22 15:28:52 2016 us=903527   show_engines = DISABLED
Tue Mar 22 15:28:52 2016 us=903549   genkey = DISABLED
Tue Mar 22 15:28:52 2016 us=903571   key_pass_file = '/etc/openvpn/key.pass'
Tue Mar 22 15:28:52 2016 us=903593   show_tls_ciphers = DISABLED
Tue Mar 22 15:28:52 2016 us=903619 Connection profiles [default]:
Tue Mar 22 15:28:52 2016 us=903643   proto = tcp-server
Tue Mar 22 15:28:52 2016 us=903666   local = '172.16.32.70'
Tue Mar 22 15:28:52 2016 us=903688   local_port = 1194
Tue Mar 22 15:28:52 2016 us=903711   remote = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=903733   remote_port = 1194
Tue Mar 22 15:28:52 2016 us=903754   remote_float = DISABLED
Tue Mar 22 15:28:52 2016 us=903776   bind_defined = DISABLED
Tue Mar 22 15:28:52 2016 us=903797   bind_local = ENABLED
Tue Mar 22 15:28:52 2016 us=903819   connect_retry_seconds = 5
Tue Mar 22 15:28:52 2016 us=903858   connect_timeout = 10
Tue Mar 22 15:28:52 2016 us=903889   connect_retry_max = 0
Tue Mar 22 15:28:52 2016 us=903912   socks_proxy_server = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=903934   socks_proxy_port = 0
Tue Mar 22 15:28:52 2016 us=903956   socks_proxy_retry = DISABLED
Tue Mar 22 15:28:52 2016 us=903981 Connection profiles END
Tue Mar 22 15:28:52 2016 us=904004   remote_random = DISABLED
Tue Mar 22 15:28:52 2016 us=904025   ipchange = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=904048   dev = 'tap0'
Tue Mar 22 15:28:52 2016 us=904069   dev_type = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=904091   dev_node = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=904112   lladdr = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=904134   topology = 1
Tue Mar 22 15:28:52 2016 us=904156   tun_ipv6 = DISABLED
Tue Mar 22 15:28:52 2016 us=904177   ifconfig_local = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=904199   ifconfig_remote_netmask = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=904220   ifconfig_noexec = DISABLED
Tue Mar 22 15:28:52 2016 us=904242   ifconfig_nowarn = DISABLED
Tue Mar 22 15:28:52 2016 us=904263   shaper = 0
Tue Mar 22 15:28:52 2016 us=904285   tun_mtu = 1500
Tue Mar 22 15:28:52 2016 us=904306   tun_mtu_defined = ENABLED
Tue Mar 22 15:28:52 2016 us=904328   link_mtu = 1500
Tue Mar 22 15:28:52 2016 us=904349   link_mtu_defined = DISABLED
Tue Mar 22 15:28:52 2016 us=904371   tun_mtu_extra = 32
Tue Mar 22 15:28:52 2016 us=904393   tun_mtu_extra_defined = ENABLED
Tue Mar 22 15:28:52 2016 us=904414   fragment = 0
Tue Mar 22 15:28:52 2016 us=904436   mtu_discover_type = -1
Tue Mar 22 15:28:52 2016 us=904458   mtu_test = 0
Tue Mar 22 15:28:52 2016 us=904480   mlock = DISABLED
Tue Mar 22 15:28:52 2016 us=904501   keepalive_ping = 10
Tue Mar 22 15:28:52 2016 us=904523   keepalive_timeout = 120
Tue Mar 22 15:28:52 2016 us=904544   inactivity_timeout = 0
Tue Mar 22 15:28:52 2016 us=904566   ping_send_timeout = 10
Tue Mar 22 15:28:52 2016 us=904587   ping_rec_timeout = 240
Tue Mar 22 15:28:52 2016 us=904608   ping_rec_timeout_action = 2
Tue Mar 22 15:28:52 2016 us=904630   ping_timer_remote = DISABLED
Tue Mar 22 15:28:52 2016 us=904651   remap_sigusr1 = 0
Tue Mar 22 15:28:52 2016 us=904673   explicit_exit_notification = 0
Tue Mar 22 15:28:52 2016 us=904694   persist_tun = ENABLED
Tue Mar 22 15:28:52 2016 us=904716   persist_local_ip = DISABLED
Tue Mar 22 15:28:52 2016 us=904737   persist_remote_ip = DISABLED
Tue Mar 22 15:28:52 2016 us=904759   persist_key = ENABLED
Tue Mar 22 15:28:52 2016 us=904780   mssfix = 1450
Tue Mar 22 15:28:52 2016 us=904802   passtos = DISABLED
Tue Mar 22 15:28:52 2016 us=904857   resolve_retry_seconds = 1000000000
Tue Mar 22 15:28:52 2016 us=904889   username = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=904912   groupname = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=904933   chroot_dir = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=904966   cd_dir = '/etc/openvpn/'
Tue Mar 22 15:28:52 2016 us=904989   selinux_context = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905011   writepid = '/var/run/openvpn/bridge.pid'
Tue Mar 22 15:28:52 2016 us=905041   up_script = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905064   down_script = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905086   down_pre = DISABLED
Tue Mar 22 15:28:52 2016 us=905108   up_restart = DISABLED
Tue Mar 22 15:28:52 2016 us=905130   up_delay = DISABLED
Tue Mar 22 15:28:52 2016 us=905152   daemon = ENABLED
Tue Mar 22 15:28:52 2016 us=905174   inetd = 0
Tue Mar 22 15:28:52 2016 us=905196   log = ENABLED
Tue Mar 22 15:28:52 2016 us=905218   suppress_timestamps = DISABLED
Tue Mar 22 15:28:52 2016 us=905240   nice = 0
Tue Mar 22 15:28:52 2016 us=905261   verbosity = 4
Tue Mar 22 15:28:52 2016 us=905283   mute = 0
Tue Mar 22 15:28:52 2016 us=905305   gremlin = 0
Tue Mar 22 15:28:52 2016 us=905326   status_file = '/var/mylog/openvpn-status.log'
Tue Mar 22 15:28:52 2016 us=905348   status_file_version = 1
Tue Mar 22 15:28:52 2016 us=905370   status_file_update_freq = 60
Tue Mar 22 15:28:52 2016 us=905391   occ = ENABLED
Tue Mar 22 15:28:52 2016 us=905413   rcvbuf = 65536
Tue Mar 22 15:28:52 2016 us=905434   sndbuf = 65536
Tue Mar 22 15:28:52 2016 us=905456   sockflags = 0
Tue Mar 22 15:28:52 2016 us=905477   fast_io = DISABLED
Tue Mar 22 15:28:52 2016 us=905499   lzo = 7
Tue Mar 22 15:28:52 2016 us=905521   route_script = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905542   route_default_gateway = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905564   route_default_metric = 0
Tue Mar 22 15:28:52 2016 us=905585   route_noexec = DISABLED
Tue Mar 22 15:28:52 2016 us=905607   route_delay = 0
Tue Mar 22 15:28:52 2016 us=905628   route_delay_window = 30
Tue Mar 22 15:28:52 2016 us=905650   route_delay_defined = DISABLED
Tue Mar 22 15:28:52 2016 us=905672   route_nopull = DISABLED
Tue Mar 22 15:28:52 2016 us=905694   route_gateway_via_dhcp = DISABLED
Tue Mar 22 15:28:52 2016 us=905717   max_routes = 100
Tue Mar 22 15:28:52 2016 us=905738   allow_pull_fqdn = DISABLED
Tue Mar 22 15:28:52 2016 us=905761   management_addr = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905783   management_port = 0
Tue Mar 22 15:28:52 2016 us=905805   management_user_pass = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905845   management_log_history_cache = 250
Tue Mar 22 15:28:52 2016 us=905873   management_echo_buffer_size = 100
Tue Mar 22 15:28:52 2016 us=905896   management_write_peer_info_file = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905918   management_client_user = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905940   management_client_group = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=905962   management_flags = 0
Tue Mar 22 15:28:52 2016 us=905984   shared_secret_file = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=906007   key_direction = 0
Tue Mar 22 15:28:52 2016 us=906029   ciphername_defined = ENABLED
Tue Mar 22 15:28:52 2016 us=906051   ciphername = 'BF-CBC'
Tue Mar 22 15:28:52 2016 us=906073   authname_defined = ENABLED
Tue Mar 22 15:28:52 2016 us=906095   authname = 'SHA1'
Tue Mar 22 15:28:52 2016 us=906117   prng_hash = 'SHA1'
Tue Mar 22 15:28:52 2016 us=906139   prng_nonce_secret_len = 16
Tue Mar 22 15:28:52 2016 us=906169   keysize = 0
Tue Mar 22 15:28:52 2016 us=906192   engine = DISABLED
Tue Mar 22 15:28:52 2016 us=906215   replay = ENABLED
Tue Mar 22 15:28:52 2016 us=906237   mute_replay_warnings = DISABLED
Tue Mar 22 15:28:52 2016 us=906260   replay_window = 64
Tue Mar 22 15:28:52 2016 us=906283   replay_time = 15
Tue Mar 22 15:28:52 2016 us=906306   packet_id_file = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=906328   use_iv = ENABLED
Tue Mar 22 15:28:52 2016 us=906350   test_crypto = DISABLED
Tue Mar 22 15:28:52 2016 us=906372   tls_server = ENABLED
Tue Mar 22 15:28:52 2016 us=906394   tls_client = DISABLED
Tue Mar 22 15:28:52 2016 us=906416   key_method = 2
Tue Mar 22 15:28:52 2016 us=906438   ca_file = '/etc/openvpn/easy-rsa/3.0.0/pki/ca.crt'
Tue Mar 22 15:28:52 2016 us=906461   ca_path = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=906490   dh_file = '/etc/openvpn/easy-rsa/3.0.0/pki/dh.pem'
Tue Mar 22 15:28:52 2016 us=906525   cert_file = '/etc/openvpn/easy-rsa/3.0.0/pki/issued/squirrelRSAserver.crt'
Tue Mar 22 15:28:52 2016 us=906548   priv_key_file = '/etc/openvpn/easy-rsa/3.0.0/pki/private/squirrelRSAserver.key'
Tue Mar 22 15:28:52 2016 us=906571   pkcs12_file = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=906593   cipher_list = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=906615   tls_verify = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=906637   tls_export_cert = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=906659   tls_remote = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=906681   crl_file = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=906703   ns_cert_type = 0
Tue Mar 22 15:28:52 2016 us=906725   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906747   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906769   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906790   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906812   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906870   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906894   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906915   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906937   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906958   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=906980   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=907001   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=907023   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=907045   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=907067   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=907088   remote_cert_ku[i] = 0
Tue Mar 22 15:28:52 2016 us=907110   remote_cert_eku = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=907132   tls_timeout = 2
Tue Mar 22 15:28:52 2016 us=907154   renegotiate_bytes = 0
Tue Mar 22 15:28:52 2016 us=907176   renegotiate_packets = 0
Tue Mar 22 15:28:52 2016 us=907198   renegotiate_seconds = 3600
Tue Mar 22 15:28:52 2016 us=907220   handshake_window = 60
Tue Mar 22 15:28:52 2016 us=907242   transition_window = 3600
Tue Mar 22 15:28:52 2016 us=907263   single_session = DISABLED
Tue Mar 22 15:28:52 2016 us=907290   push_peer_info = DISABLED
Tue Mar 22 15:28:52 2016 us=907314   tls_exit = DISABLED
Tue Mar 22 15:28:52 2016 us=907336   tls_auth_file = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=907359   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907382   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907404   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907427   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907449   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907471   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907494   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907517   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907539   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907561   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907583   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907606   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907628   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907650   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907672   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907694   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:28:52 2016 us=907721   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=907745   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=907768   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=907790   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=907812   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=907878   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=907903   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=907926   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=907959   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=907983   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=908005   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=908027   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=908049   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=908073   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=908096   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=908118   pkcs11_private_mode = 00000000
Tue Mar 22 15:28:52 2016 us=908141   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908163   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908185   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908207   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908230   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908251   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908274   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908296   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908318   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908340   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908362   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908384   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908416   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908439   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908462   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908485   pkcs11_cert_private = DISABLED
Tue Mar 22 15:28:52 2016 us=908508   pkcs11_pin_cache_period = -1
Tue Mar 22 15:28:52 2016 us=908531   pkcs11_id = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=908553   pkcs11_id_management = DISABLED
Tue Mar 22 15:28:52 2016 us=908586   server_network = 0.0.0.0
Tue Mar 22 15:28:52 2016 us=908614   server_netmask = 0.0.0.0
Tue Mar 22 15:28:52 2016 us=908640   server_bridge_ip = 172.16.32.70
Tue Mar 22 15:28:52 2016 us=908666   server_bridge_netmask = 255.255.255.0
Tue Mar 22 15:28:52 2016 us=908692   server_bridge_pool_start = 172.16.32.90
Tue Mar 22 15:28:52 2016 us=908718   server_bridge_pool_end = 172.16.32.99
Tue Mar 22 15:28:52 2016 us=908741   push_entry = 'route-gateway 172.16.32.70'
Tue Mar 22 15:28:52 2016 us=908763   push_entry = 'ping 10'
Tue Mar 22 15:28:52 2016 us=908786   push_entry = 'ping-restart 120'
Tue Mar 22 15:28:52 2016 us=908808   ifconfig_pool_defined = ENABLED
Tue Mar 22 15:28:52 2016 us=908850   ifconfig_pool_start = 172.16.32.90
Tue Mar 22 15:28:52 2016 us=908887   ifconfig_pool_end = 172.16.32.99
Tue Mar 22 15:28:52 2016 us=908914   ifconfig_pool_netmask = 255.255.255.0
Tue Mar 22 15:28:52 2016 us=908937   ifconfig_pool_persist_filename = '/var/mylog/ipp.txt'
Tue Mar 22 15:28:52 2016 us=908960   ifconfig_pool_persist_refresh_freq = 600
Tue Mar 22 15:28:52 2016 us=908982   n_bcast_buf = 256
Tue Mar 22 15:28:52 2016 us=909004   tcp_queue_limit = 64
Tue Mar 22 15:28:52 2016 us=909026   real_hash_size = 256
Tue Mar 22 15:28:52 2016 us=909048   virtual_hash_size = 256
Tue Mar 22 15:28:52 2016 us=909069   client_connect_script = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=909091   learn_address_script = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=909113   client_disconnect_script = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=909135   client_config_dir = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=909157   ccd_exclusive = DISABLED
Tue Mar 22 15:28:52 2016 us=909179   tmp_dir = '/tmp'
Tue Mar 22 15:28:52 2016 us=909201   push_ifconfig_defined = DISABLED
Tue Mar 22 15:28:52 2016 us=909227   push_ifconfig_local = 0.0.0.0
Tue Mar 22 15:28:52 2016 us=909252   push_ifconfig_remote_netmask = 0.0.0.0
Tue Mar 22 15:28:52 2016 us=909274   enable_c2c = DISABLED
Tue Mar 22 15:28:52 2016 us=909296   duplicate_cn = DISABLED
Tue Mar 22 15:28:52 2016 us=909318   cf_max = 0
Tue Mar 22 15:28:52 2016 us=909340   cf_per = 0
Tue Mar 22 15:28:52 2016 us=909362   max_clients = 1024
Tue Mar 22 15:28:52 2016 us=909384   max_routes_per_client = 256
Tue Mar 22 15:28:52 2016 us=909416   auth_user_pass_verify_script = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=909439   auth_user_pass_verify_script_via_file = DISABLED
Tue Mar 22 15:28:52 2016 us=909461   ssl_flags = 0
Tue Mar 22 15:28:52 2016 us=909483   port_share_host = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=909505   port_share_port = 0
Tue Mar 22 15:28:52 2016 us=909526   client = DISABLED
Tue Mar 22 15:28:52 2016 us=909558   pull = DISABLED
Tue Mar 22 15:28:52 2016 us=909581   auth_user_pass_file = '[UNDEF]'
Tue Mar 22 15:28:52 2016 us=909607 OpenVPN 2.2.1 i386-redhat-linux-gnu [SSL] [LZO2] [EPOLL] [PKCS11] [eurephia] built on Sep  9 2011
Tue Mar 22 15:28:52 2016 us=918908 NOTE: when bridging your LAN adapter with the TAP adapter, note that the new bridge adapter will often take on its own IP address that is different from what the LAN adapter was previously set to
Tue Mar 22 15:28:52 2016 us=919330 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Tue Mar 22 15:28:52 2016 us=997238 Diffie-Hellman initialized with 2048 bit key
Tue Mar 22 15:28:53 2016 us=13933 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Mar 22 15:28:53 2016 us=41894 TLS-Auth MTU parms [ L:1576 D:140 EF:40 EB:0 ET:0 EL:0 ]
Tue Mar 22 15:28:53 2016 us=42088 Socket Buffers: R=[87380->131072] S=[16384->131072]
Tue Mar 22 15:28:53 2016 us=42861 TUN/TAP device tap0 opened
Tue Mar 22 15:28:53 2016 us=42927 TUN/TAP TX queue length set to 100
Tue Mar 22 15:28:53 2016 us=42987 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:135 ET:32 EL:0 AF:3/1 ]
Tue Mar 22 15:28:53 2016 us=43900 Listening for incoming TCP connection on 172.16.32.70:1194
Tue Mar 22 15:28:53 2016 us=44049 TCPv4_SERVER link local (bound): 172.16.32.70:1194
Tue Mar 22 15:28:53 2016 us=44080 TCPv4_SERVER link remote: [undef]
Tue Mar 22 15:28:53 2016 us=44122 MULTI: multi_init called, r=256 v=256
Tue Mar 22 15:28:53 2016 us=44268 IFCONFIG POOL: base=172.16.32.90 size=10
Tue Mar 22 15:28:53 2016 us=57422 IFCONFIG POOL LIST
Tue Mar 22 15:28:53 2016 us=57473 squirrelRSAclient01,172.16.32.90
Tue Mar 22 15:28:53 2016 us=57521 MULTI: TCP INIT maxclients=1024 maxevents=1028
Tue Mar 22 15:28:53 2016 us=57582 Initialization Sequence Completed

client log file

Tue Mar 22 15:31:15 2016 us=588604 Current Parameter Settings:
Tue Mar 22 15:31:15 2016 us=589604   config = 'clientbridge.ovpn'
Tue Mar 22 15:31:15 2016 us=589604   mode = 0
Tue Mar 22 15:31:15 2016 us=589604   show_ciphers = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   show_digests = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   show_engines = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   genkey = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   key_pass_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   show_tls_ciphers = DISABLED
Tue Mar 22 15:31:15 2016 us=589604 Connection profiles [default]:
Tue Mar 22 15:31:15 2016 us=589604   proto = tcp-client
Tue Mar 22 15:31:15 2016 us=589604   local = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   local_port = 0
Tue Mar 22 15:31:15 2016 us=589604   remote = '[url here]'
Tue Mar 22 15:31:15 2016 us=589604   remote_port = 1194
Tue Mar 22 15:31:15 2016 us=589604   remote_float = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   bind_defined = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   bind_local = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   connect_retry_seconds = 5
Tue Mar 22 15:31:15 2016 us=589604   connect_timeout = 10
Tue Mar 22 15:31:15 2016 us=589604   connect_retry_max = 0
Tue Mar 22 15:31:15 2016 us=589604   socks_proxy_server = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   socks_proxy_port = 0
Tue Mar 22 15:31:15 2016 us=589604   socks_proxy_retry = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   tun_mtu = 1500
Tue Mar 22 15:31:15 2016 us=589604   tun_mtu_defined = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   link_mtu = 1500
Tue Mar 22 15:31:15 2016 us=589604   link_mtu_defined = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   tun_mtu_extra = 32
Tue Mar 22 15:31:15 2016 us=589604   tun_mtu_extra_defined = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   mtu_discover_type = -1
Tue Mar 22 15:31:15 2016 us=589604   fragment = 0
Tue Mar 22 15:31:15 2016 us=589604   mssfix = 1450
Tue Mar 22 15:31:15 2016 us=589604   explicit_exit_notification = 0
Tue Mar 22 15:31:15 2016 us=589604 Connection profiles END
Tue Mar 22 15:31:15 2016 us=589604   remote_random = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   ipchange = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   dev = 'tap'
Tue Mar 22 15:31:15 2016 us=589604   dev_type = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   dev_node = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   lladdr = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   topology = 1
Tue Mar 22 15:31:15 2016 us=589604   tun_ipv6 = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   ifconfig_local = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   ifconfig_remote_netmask = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   ifconfig_noexec = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   ifconfig_nowarn = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   ifconfig_ipv6_local = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   ifconfig_ipv6_netbits = 0
Tue Mar 22 15:31:15 2016 us=589604   ifconfig_ipv6_remote = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   shaper = 0
Tue Mar 22 15:31:15 2016 us=589604   mtu_test = 0
Tue Mar 22 15:31:15 2016 us=589604   mlock = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   keepalive_ping = 0
Tue Mar 22 15:31:15 2016 us=589604   keepalive_timeout = 0
Tue Mar 22 15:31:15 2016 us=589604   inactivity_timeout = 0
Tue Mar 22 15:31:15 2016 us=589604   ping_send_timeout = 0
Tue Mar 22 15:31:15 2016 us=589604   ping_rec_timeout = 0
Tue Mar 22 15:31:15 2016 us=589604   ping_rec_timeout_action = 0
Tue Mar 22 15:31:15 2016 us=589604   ping_timer_remote = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   remap_sigusr1 = 0
Tue Mar 22 15:31:15 2016 us=589604   persist_tun = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   persist_local_ip = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   persist_remote_ip = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   persist_key = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   passtos = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   resolve_retry_seconds = 1000000000
Tue Mar 22 15:31:15 2016 us=589604   username = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   groupname = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   chroot_dir = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   cd_dir = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   writepid = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   up_script = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   down_script = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   down_pre = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   up_restart = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   up_delay = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   daemon = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   inetd = 0
Tue Mar 22 15:31:15 2016 us=589604   log = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   suppress_timestamps = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   nice = 0
Tue Mar 22 15:31:15 2016 us=589604   verbosity = 4
Tue Mar 22 15:31:15 2016 us=589604   mute = 0
Tue Mar 22 15:31:15 2016 us=589604   gremlin = 0
Tue Mar 22 15:31:15 2016 us=589604   status_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   status_file_version = 1
Tue Mar 22 15:31:15 2016 us=589604   status_file_update_freq = 60
Tue Mar 22 15:31:15 2016 us=589604   occ = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   rcvbuf = 0
Tue Mar 22 15:31:15 2016 us=589604   sndbuf = 0
Tue Mar 22 15:31:15 2016 us=589604   sockflags = 0
Tue Mar 22 15:31:15 2016 us=589604   fast_io = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   lzo = 7
Tue Mar 22 15:31:15 2016 us=589604   route_script = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   route_default_gateway = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   route_default_metric = 0
Tue Mar 22 15:31:15 2016 us=589604   route_noexec = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   route_delay = 5
Tue Mar 22 15:31:15 2016 us=589604   route_delay_window = 30
Tue Mar 22 15:31:15 2016 us=589604   route_delay_defined = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   route_nopull = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   route_gateway_via_dhcp = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   max_routes = 100
Tue Mar 22 15:31:15 2016 us=589604   allow_pull_fqdn = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   route 0.0.0.0/0.0.0.0/vpn_gateway/999
Tue Mar 22 15:31:15 2016 us=589604   management_addr = '127.0.0.1'
Tue Mar 22 15:31:15 2016 us=589604   management_port = 25341
Tue Mar 22 15:31:15 2016 us=589604   management_user_pass = 'stdin'
Tue Mar 22 15:31:15 2016 us=589604   management_log_history_cache = 250
Tue Mar 22 15:31:15 2016 us=589604   management_echo_buffer_size = 100
Tue Mar 22 15:31:15 2016 us=589604   management_write_peer_info_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   management_client_user = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   management_client_group = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   management_flags = 6
Tue Mar 22 15:31:15 2016 us=589604   shared_secret_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   key_direction = 0
Tue Mar 22 15:31:15 2016 us=589604   ciphername_defined = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   ciphername = 'BF-CBC'
Tue Mar 22 15:31:15 2016 us=589604   authname_defined = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   authname = 'SHA1'
Tue Mar 22 15:31:15 2016 us=589604   prng_hash = 'SHA1'
Tue Mar 22 15:31:15 2016 us=589604   prng_nonce_secret_len = 16
Tue Mar 22 15:31:15 2016 us=589604   keysize = 0
Tue Mar 22 15:31:15 2016 us=589604   engine = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   replay = ENABLED
Tue Mar 22 15:31:15 2016 us=589604   mute_replay_warnings = DISABLED
Tue Mar 22 15:31:15 2016 us=589604   replay_window = 64
Tue Mar 22 15:31:15 2016 us=589604   replay_time = 15
Tue Mar 22 15:31:15 2016 us=589604   packet_id_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=589604   use_iv = ENABLED
Tue Mar 22 15:31:15 2016 us=590604   test_crypto = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   tls_server = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   tls_client = ENABLED
Tue Mar 22 15:31:15 2016 us=590604   key_method = 2
Tue Mar 22 15:31:15 2016 us=590604   ca_file = 'Y:/ssh/OpenVPN/ca.crt'
Tue Mar 22 15:31:15 2016 us=590604   ca_path = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   dh_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   cert_file = 'Y:/ssh/OpenVPN/squirrelRSAclient01.crt'
Tue Mar 22 15:31:15 2016 us=590604   extra_certs_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   priv_key_file = 'Y:/ssh/OpenVPN/squirrelRSAclient01.key'
Tue Mar 22 15:31:15 2016 us=590604   pkcs12_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   cryptoapi_cert = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   cipher_list = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   tls_verify = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   tls_export_cert = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   verify_x509_type = 0
Tue Mar 22 15:31:15 2016 us=590604   verify_x509_name = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   crl_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   ns_cert_type = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_ku[i] = 0
Tue Mar 22 15:31:15 2016 us=590604   remote_cert_eku = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   ssl_flags = 0
Tue Mar 22 15:31:15 2016 us=590604   tls_timeout = 2
Tue Mar 22 15:31:15 2016 us=590604   renegotiate_bytes = 0
Tue Mar 22 15:31:15 2016 us=590604   renegotiate_packets = 0
Tue Mar 22 15:31:15 2016 us=590604   renegotiate_seconds = 3600
Tue Mar 22 15:31:15 2016 us=590604   handshake_window = 60
Tue Mar 22 15:31:15 2016 us=590604   transition_window = 3600
Tue Mar 22 15:31:15 2016 us=590604   single_session = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   push_peer_info = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   tls_exit = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   tls_auth_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_protected_authentication = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_private_mode = 00000000
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_cert_private = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_pin_cache_period = -1
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_id = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=590604   pkcs11_id_management = DISABLED
Tue Mar 22 15:31:15 2016 us=590604   server_network = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=590604   server_netmask = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   server_network_ipv6 = ::
Tue Mar 22 15:31:15 2016 us=591604   server_netbits_ipv6 = 0
Tue Mar 22 15:31:15 2016 us=591604   server_bridge_ip = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   server_bridge_netmask = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   server_bridge_pool_start = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   server_bridge_pool_end = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   ifconfig_pool_defined = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   ifconfig_pool_start = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   ifconfig_pool_end = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   ifconfig_pool_netmask = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   ifconfig_pool_persist_filename = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=591604   ifconfig_pool_persist_refresh_freq = 600
Tue Mar 22 15:31:15 2016 us=591604   ifconfig_ipv6_pool_defined = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   ifconfig_ipv6_pool_base = ::
Tue Mar 22 15:31:15 2016 us=591604   ifconfig_ipv6_pool_netbits = 0
Tue Mar 22 15:31:15 2016 us=591604   n_bcast_buf = 256
Tue Mar 22 15:31:15 2016 us=591604   tcp_queue_limit = 64
Tue Mar 22 15:31:15 2016 us=591604   real_hash_size = 256
Tue Mar 22 15:31:15 2016 us=591604   virtual_hash_size = 256
Tue Mar 22 15:31:15 2016 us=591604   client_connect_script = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=591604   learn_address_script = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=591604   client_disconnect_script = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=591604   client_config_dir = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=591604   ccd_exclusive = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   tmp_dir = 'C:\Users\GRIMBL~1\AppData\Local\Temp\'
Tue Mar 22 15:31:15 2016 us=591604   push_ifconfig_defined = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   push_ifconfig_local = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   push_ifconfig_remote_netmask = 0.0.0.0
Tue Mar 22 15:31:15 2016 us=591604   push_ifconfig_ipv6_defined = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   push_ifconfig_ipv6_local = ::/0
Tue Mar 22 15:31:15 2016 us=591604   push_ifconfig_ipv6_remote = ::
Tue Mar 22 15:31:15 2016 us=591604   enable_c2c = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   duplicate_cn = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   cf_max = 0
Tue Mar 22 15:31:15 2016 us=591604   cf_per = 0
Tue Mar 22 15:31:15 2016 us=591604   max_clients = 1024
Tue Mar 22 15:31:15 2016 us=591604   max_routes_per_client = 256
Tue Mar 22 15:31:15 2016 us=591604   auth_user_pass_verify_script = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=591604   auth_user_pass_verify_script_via_file = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   client = ENABLED
Tue Mar 22 15:31:15 2016 us=591604   pull = ENABLED
Tue Mar 22 15:31:15 2016 us=591604   auth_user_pass_file = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=591604   show_net_up = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   route_method = 0
Tue Mar 22 15:31:15 2016 us=591604   block_outside_dns = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   ip_win32_defined = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   ip_win32_type = 3
Tue Mar 22 15:31:15 2016 us=591604   dhcp_masq_offset = 0
Tue Mar 22 15:31:15 2016 us=591604   dhcp_lease_time = 31536000
Tue Mar 22 15:31:15 2016 us=591604   tap_sleep = 0
Tue Mar 22 15:31:15 2016 us=591604   dhcp_options = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   dhcp_renew = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   dhcp_pre_release = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   dhcp_release = DISABLED
Tue Mar 22 15:31:15 2016 us=591604   domain = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=591604   netbios_scope = '[UNDEF]'
Tue Mar 22 15:31:15 2016 us=591604   netbios_node_type = 0
Tue Mar 22 15:31:15 2016 us=591604   disable_nbt = DISABLED
Tue Mar 22 15:31:15 2016 us=591604 OpenVPN 2.3.10 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [PKCS11] [IPv6] built on Jan  4 2016
Tue Mar 22 15:31:15 2016 us=591604 Windows version 6.1 (Windows 7)
Tue Mar 22 15:31:15 2016 us=591604 library versions: OpenSSL 1.0.1q 3 Dec 2015, LZO 2.09
Enter Management Password:
Tue Mar 22 15:31:15 2016 us=592604 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Tue Mar 22 15:31:15 2016 us=592604 Need hold release from management interface, waiting...
Tue Mar 22 15:31:16 2016 us=67631 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Tue Mar 22 15:31:16 2016 us=167637 MANAGEMENT: CMD 'state on'
Tue Mar 22 15:31:16 2016 us=167637 MANAGEMENT: CMD 'log all on'
Tue Mar 22 15:31:16 2016 us=226640 MANAGEMENT: CMD 'hold off'
Tue Mar 22 15:31:16 2016 us=227640 MANAGEMENT: CMD 'hold release'
Tue Mar 22 15:31:16 2016 us=227640 WARNING: No server certificate verification method has been enabled.  See http://openvpn.net/howto.html#mitm for more info.
Tue Mar 22 15:31:26 2016 us=471226 MANAGEMENT: CMD 'password [...]'
Tue Mar 22 15:31:26 2016 us=471226 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Tue Mar 22 15:31:26 2016 us=475227 LZO compression initialized
Tue Mar 22 15:31:26 2016 us=475227 Control Channel MTU parms [ L:1576 D:1210 EF:40 EB:0 ET:0 EL:3 ]
Tue Mar 22 15:31:26 2016 us=475227 Socket Buffers: R=[8192->8192] S=[8192->8192]
Tue Mar 22 15:31:26 2016 us=475227 MANAGEMENT: >STATE:1458660686,RESOLVE,,,
Tue Mar 22 15:31:26 2016 us=734241 Data Channel MTU parms [ L:1576 D:1450 EF:44 EB:143 ET:32 EL:3 AF:3/1 ]
Tue Mar 22 15:31:26 2016 us=734241 Local Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_CLIENT,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-client'
Tue Mar 22 15:31:26 2016 us=735241 Expected Remote Options String: 'V4,dev-type tap,link-mtu 1576,tun-mtu 1532,proto TCPv4_SERVER,comp-lzo,cipher BF-CBC,auth SHA1,keysize 128,key-method 2,tls-server'
Tue Mar 22 15:31:26 2016 us=735241 Local Options hash (VER=V4): '31fdf004'
Tue Mar 22 15:31:26 2016 us=735241 Expected Remote Options hash (VER=V4): '3e6d1056'
Tue Mar 22 15:31:26 2016 us=735241 Attempting to establish TCP connection with [AF_INET]109.147.151.33:1194 [nonblock]
Tue Mar 22 15:31:26 2016 us=735241 MANAGEMENT: >STATE:1458660686,TCP_CONNECT,,,
Tue Mar 22 15:31:36 2016 us=735813 TCP: connect to [AF_INET]109.147.151.33:1194 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Tue Mar 22 15:31:41 2016 us=736099 MANAGEMENT: >STATE:1458660701,RESOLVE,,,
Tue Mar 22 15:31:41 2016 us=736099 MANAGEMENT: >STATE:1458660701,TCP_CONNECT,,,
Tue Mar 22 15:31:51 2016 us=736671 TCP: connect to [AF_INET]109.147.151.33:1194 failed, will try again in 5 seconds: The system tried to join a drive to a directory on a joined drive.  
Tue Mar 22 15:31:56 2016 us=736957 MANAGEMENT: >STATE:1458660716,RESOLVE,,,
Tue Mar 22 15:31:56 2016 us=736957 MANAGEMENT: >STATE:1458660716,TCP_CONNECT,,,
Tue Mar 22 15:32:02 2016 us=737301 TCP/UDP: Closing socket
Tue Mar 22 15:32:02 2016 us=737301 SIGTERM[hard,init_instance] received, process exiting
Tue Mar 22 15:32:02 2016 us=737301 MANAGEMENT: >STATE:1458660722,EXITING,init_instance,,

Traffic

Your server log shows that the client does not connect to the server at all .. so probably a firewall rule.

job

Traffic wroteYour server log shows that the client does not connect to the server at all .. so probably a firewall rule.

Hi,

Below are the relevant entries from iptables. Apologies but I am not sure how these would be wrong as I have followed instructions to generate them.

With regards to the port forwarding/firewall on the router, the same port/IP is used for the 'Routed' OpenVPN config which works, thus I doubt there is an issue with this? Also why would it work over the LAN but NOT from an external connection?

iptables extract

## VPN Setup
-A INPUT -m state --state NEW -m tcp -p tcp --dport 1194 -j ACCEPT
## VPN Setup - Bridge
-A INPUT -i tap0 -j ACCEPT
-A INPUT -i br0 -j ACCEPT
-A FORWARD -i br0 -j ACCEPT
## VPN Setup - Routed (working)
-A INPUT -i tun0 -m state --state NEW -m tcp -p tcp -m multiport --dports 137,138,139,445 -j ACCEPT

Traffic

Please post route -n of server with bridge enabled.

job

Traffic wrotePlease post route -n of server with bridge enabled.

Hi, below is output of route -n.

Thanks again for your patience.

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
172.16.32.0     0.0.0.0         255.255.255.0   U     0      0        0 br0

job

Update

I have had another play around and identified that all EXTERNAL connections to the Linux server (e.g. ssh, OpenVPN, etc) are failing when I have run the bridge-start script. Connections made from within the LAN still seem to work.

The server is sat behind a Linksys router and modem with port forwarding on appropriate ports. The server IP address is fixed and not obtained from the router DHCP.